ZAP Error [java.net.ConnectException]: Connection refused (Connection refused) - Browser unable to access ZAP instance deployed in minikube.

Svsn K

unread,

May 31, 2020, 12:54:53 AM5/31/20

to OWASP ZAP User Group

Hello Zap Experts!

I am trying to set up zap in minikube and trying to access it from a browser. Unfortunately I am getting the following error:

ZAP Error [java.net.ConnectException]: Connection refused (Connection refused)

However, I am able to connect to the zap port successfully from within the cluster/minikube.

Can you please see what I wrong?

Thanks in advance,

Svsn

###### deployment.yaml #######################

apiVersion: apps/v1

kind: Deployment

metadata:

name: zap-global

spec:

replicas: 1

selector:

matchLabels:

run: zap-global

template:

metadata:

labels:

run: zap-global

spec:

containers:

- name: zap-global

command: ["zap.sh", "-daemon", "-port", "8094", "-host", "0.0.0.0", "-config", "api.key=12345", "-config", "api.disablekey=true", "-config", "api.addrs.addr.name=.*", "-config", "api.addrs.addr.regex=true"]

image: owasp/zap2docker-stable

imagePullPolicy: Always

ports:

- containerPort: 8094

protocol: TCP

lifecycle:

postStart:

exec:

command: ["/bin/sh", "-c", "mkdir /zap/wrk"]

$kubectl apply -f deployment.yaml

###### LoadBalancer config ######################

$kubectl expose deployment zap-global --type=LoadBalancer --port=8094

######## Accessing zap from minikube ############

$ minikube ssh

docker@minikube:~$ curl 172.18.0.5:8094

<head>

</head>

<body>

<h1>Welcome to the OWASP Zed Attack Proxy (ZAP)</h1><p>ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.</p><p></p><p>Please be aware that you should only attack applications that you have been specifically been given permission to test.</p><h2>Proxy Configuration</h2><p>To use ZAP effectively it is recommended that you configure your browser to proxy via ZAP.</p><p></p><p>You can do that manually or by configuring your browser to use the generated <a href="/OTHER/core/other/proxy.pac/?apinonce=63342165ec57097c">PAC file</a>.</p><h2>Links</h2><li><a href="/UI">Local API</a></li><li><a href="https://www.zaproxy.org/">ZAP Homepage</a></li><li><a href="https://groups.google.com/group/zaproxy-users">ZAP User Group</a></li><li><a href="https://groups.google.com/group/zaproxy-develop">ZAP Developer Group</a></li><li><a href="https://github.com/zaproxy/zaproxy/issues">Report an issue</a></li></body>

######## Accessing zap from browser ############

#Expose LB thru minikube

$minikube service zap-global --url

🏃 Starting tunnel for service zap-global.

|-----------|------------|-------------|------------------------|

|-----------|------------|-------------|------------------------|

|-----------|------------|-------------|------------------------|

http://127.0.0.1:55767

❗ Because you are using a Docker driver on darwin, the terminal needs to be open to run it.

#############Open URL (http://127.0.0.1:55767) in browser################

ZAP Error [java.net.ConnectException]: Connection refused (Connection refused)

Stack Trace:

java.net.ConnectException: Connection refused (Connection refused)

        at java.net.PlainSocketImpl.socketConnect(Native Method)

        at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)

        at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)

        at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)

        at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)

        at java.net.Socket.connect(Socket.java:607)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:140)

        at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:125)

        at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:728)

        at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)

        at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:449)

        at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:201)

        at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)

        at org.parosproxy.paros.network.HttpSender.executeMethod(HttpSender.java:418)

        at org.parosproxy.paros.network.HttpSender.runMethod(HttpSender.java:653)

        at org.parosproxy.paros.network.HttpSender.send(HttpSender.java:609)

        at org.parosproxy.paros.network.HttpSender.sendAuthenticated(HttpSender.java:585)

        at org.parosproxy.paros.network.HttpSender.sendAuthenticated(HttpSender.java:573)

        at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:478)

        at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:448)

        at org.parosproxy.paros.core.proxy.ProxyThread.processHttp(ProxyThread.java:564)

        at org.parosproxy.paros.core.proxy.ProxyThread.run(ProxyThread.java:335)

        at java.lang.Thread.run(Thread.java:748)

Svsn K

unread,

May 31, 2020, 6:33:30 PM5/31/20

to OWASP ZAP User Group

Hello Experts!

I turned on the zap logging and got the following logs in the console:

378504 [ZAP-ProxyThread-9] DEBUG org.parosproxy.paros.model.SiteMap - findChild Sites / http://127.0.0.1:57488

378506 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.socket.timeout = 20000

378506 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection.timeout = 20000

378506 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection.stalecheck = true

378507 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection-manager.max-per-host = {HostConfiguration[]=10000}

378507 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection-manager.max-total = 200000

378508 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.socket.timeout = 20000

378508 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection.timeout = 20000

378508 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection.stalecheck = true

378509 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection-manager.max-per-host = {HostConfiguration[]=10000}

378509 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.connection-manager.max-total = 200000

378510 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.protocol.allow-circular-redirects = true

378511 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.protocol.single-cookie-header = true

378511 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter method.connect.default.user.agent = Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0

378512 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.protocol.cookie-policy = ignoreCookies

378512 [ZAP-ProxyThread-9] DEBUG org.parosproxy.paros.network.HttpSender - sendAndReceive GET http://127.0.0.1:57488/ start

378512 [ZAP-ProxyThread-9] DEBUG org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - No session tokens for: 127.0.0.1:57488

378513 [ZAP-ProxyThread-9] DEBUG org.parosproxy.paros.network.HttpSender - Sending message to: http://127.0.0.1:57488/

378514 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.protocol.version = HTTP/1.0

378514 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.params.DefaultHttpParams - Set parameter http.protocol.version = HTTP/1.1

378515 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.MultiThreadedHttpConnectionManager - HttpConnectionManager.getConnection: config = HostConfiguration[host=http://127.0.0.1:57488], timeout = 0

378515 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.MultiThreadedHttpConnectionManager - Allocating new connection, hostConfig=HostConfiguration[host=http://127.0.0.1:57488]

378515 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.HttpConnection - Open connection to 127.0.0.1:57488

378517 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.HttpMethodDirector - Closing the connection.

378517 [ZAP-ProxyThread-9] INFO org.apache.commons.httpclient.HttpMethodDirector - I/O exception (java.net.ConnectException) caught when processing request: Connection refused (Connection refused)

378518 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.HttpMethodDirector - Connection refused (Connection refused)

java.net.ConnectException: Connection refused (Connection refused)

at java.net.PlainSocketImpl.socketConnect(Native Method)

at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)

at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)

at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)

at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)

at java.net.Socket.connect(Socket.java:607)

at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:140)

at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:125)

at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:728)

at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)

at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:449)

at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:201)

at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)

at org.parosproxy.paros.network.HttpSender.executeMethod(HttpSender.java:418)

at org.parosproxy.paros.network.HttpSender.runMethod(HttpSender.java:653)

at org.parosproxy.paros.network.HttpSender.send(HttpSender.java:609)

at org.parosproxy.paros.network.HttpSender.sendAuthenticated(HttpSender.java:585)

at org.parosproxy.paros.network.HttpSender.sendAuthenticated(HttpSender.java:573)

at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:478)

at org.parosproxy.paros.network.HttpSender.sendAndReceive(HttpSender.java:448)

at org.parosproxy.paros.core.proxy.ProxyThread.processHttp(ProxyThread.java:564)

at org.parosproxy.paros.core.proxy.ProxyThread.run(ProxyThread.java:335)

at java.lang.Thread.run(Thread.java:748)

378524 [ZAP-ProxyThread-9] INFO org.apache.commons.httpclient.HttpMethodDirector - Retrying request

378524 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.HttpConnection - Open connection to 127.0.0.1:57488

378525 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.HttpMethodDirector - Closing the connection.

378525 [ZAP-ProxyThread-9] INFO org.apache.commons.httpclient.HttpMethodDirector - I/O exception (java.net.ConnectException) caught when processing request: Connection refused (Connection refused)

378525 [ZAP-ProxyThread-9] DEBUG org.apache.commons.httpclient.HttpMethodDirector - Connection refused (Connection refused)